Privacy Policy

We use information to:

• Provide and maintain the Service
• Create and manage user accounts
• Store and organize reimbursement records
• Execute email transmissions and other actions you direct through the Service
• Respond to inquiries and support requests
• Improve functionality and user experience
• Monitor platform performance
• Detect fraud, abuse, and security threats
• Comply with legal obligations

Where required by applicable law, we process information based on:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests

We do not sell personal information.

We may share information with:

• Hosting and cloud storage providers
• Payment processors
• Email delivery service providers used to execute transmissions you initiate
• Service providers assisting with operation of the Service
• Government agencies or legal authorities when required by law
• Successors in connection with a merger, acquisition, or sale of assets

The Service allows you to direct ClaimTrack to transmit your documents, expense reports, receipts, and other content to third-party recipients via email ("Email Transmission"). By initiating an Email Transmission, you are directing and authorizing ClaimTrack to disclose your content to the recipients you specify.

You acknowledge and agree that:

• Any content you direct ClaimTrack to transmit via email is being disclosed at your instruction and with your express consent. You assume full responsibility for that disclosure.
• Once content is transmitted via email, it exits ClaimTrack's systems and control. ClaimTrack has no ability to retrieve, delete, or otherwise control the content after it has been sent.
• Email is not an inherently secure communication channel. ClaimTrack does not guarantee the security, privacy, or confidentiality of content transmitted via email.
• ClaimTrack is not responsible for unauthorized access, interception, disclosure, or misuse of content that occurs during or after email transmission.
• You are responsible for ensuring the accuracy of recipient addresses and that you have proper authorization to transmit the content to the intended recipients.

Content you direct to be transmitted via email is treated as intended for disclosure to the specified recipients. ClaimTrack shall have no liability for any consequences arising from Email Transmissions you initiate.

We retain personal information only as long as necessary to:

• Provide the Service
• Maintain user accounts
• Resolve disputes
• Enforce agreements
• Comply with legal obligations

When information is no longer required, it will be deleted or anonymized where reasonably practical.

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include, without limitation, access controls, encryption in transit, and routine security reviews.

However, no security measure is perfect, impenetrable, or guaranteed. No method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Despite our efforts, we cannot guarantee that your information will be immune from unauthorized access, interception, loss, misuse, or disclosure by third parties.

You acknowledge and accept the inherent security risks of using internet-based services and transmitting information electronically. ClaimTrack expressly disclaims liability for any security breach, unauthorized access, or disclosure of your personal information or User Content that occurs despite our reasonable security measures, or that arises from circumstances beyond our reasonable control, including but not limited to third-party infrastructure failures, cyberattacks, zero-day exploits, or actions of malicious third parties.

You are responsible for maintaining the security of your own account credentials and devices. ClaimTrack shall not be liable for any unauthorized access to your account resulting from your failure to maintain adequate security of your credentials or devices.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CLAIMTRACK SHALL NOT BE LIABLE FOR ANY DAMAGES, LOSSES, OR CLAIMS OF ANY KIND ARISING FROM OR RELATED TO: (A) ANY UNAUTHORIZED ACCESS TO, ACQUISITION OF, ALTERATION OF, OR DISCLOSURE OF YOUR PERSONAL INFORMATION OR USER CONTENT; (B) ANY DATA BREACH OR SECURITY INCIDENT AFFECTING THE SERVICE OR THIRD-PARTY SERVICES USED TO OPERATE THE SERVICE; (C) ANY EMAIL TRANSMISSION YOU INITIATE THROUGH THE SERVICE; OR (D) ANY LOSS OF DATA OR USER CONTENT. THIS LIMITATION APPLIES REGARDLESS OF THE THEORY OF LIABILITY AND WHETHER OR NOT CLAIMTRACK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL CLAIMTRACK'S TOTAL LIABILITY ARISING FROM OR RELATED TO A SECURITY INCIDENT OR DATA BREACH EXCEED THE GREATER OF: (A) THE AMOUNT PAID BY YOU TO CLAIMTRACK DURING THE TWELVE (12) MONTHS PRECEDING THE INCIDENT; OR (B) ONE HUNDRED U.S. DOLLARS ($100.00).

Depending on your location, you may have rights regarding your personal information, including:

• Access
• Correction
• Deletion
• Data portability
• Objection to processing
• Withdrawal of consent

Requests may be submitted to hello@getclaimtrack.com. We will respond to verifiable requests within the timeframes required by applicable law.

Please note that deletion rights may be limited where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

California residents may request information regarding:

• Categories of personal information collected
• Categories of personal information disclosed
• Deletion of personal information
• Correction of inaccurate personal information

To submit a request, contact hello@getclaimtrack.com.

We will not discriminate against users for exercising privacy rights.

ClaimTrack is not directed toward children under the age of 18. We do not knowingly collect personal information from children. If we learn that personal information from a child has been collected, we will take reasonable steps to delete it.

The Service may rely on or contain links to third-party websites, services, or infrastructure providers. We are not responsible for the privacy practices, security measures, or content of third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

If you access the Service from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and processing.

Any disputes arising out of or related to this Privacy Policy are subject to the Dispute Resolution; Binding Arbitration; Class Action Waiver provisions set forth in our Terms of Service, which are incorporated herein by reference.

We may update this Privacy Policy from time to time. Changes become effective when posted on this page. The "Last Updated" date will indicate when revisions were made. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.